HCL Connections is vulnerable to a cross-site scripting (XSS) flaw that allows an attacker to inject and execute arbitrary script code in the browser of an unsuspecting user. By doing so, the attacker can steal cookie‑based authentication credentials, compromise the user’s account, and potentially launch additional attacks from that compromised session. The vulnerability arises from insufficient input validation leading to unauthenticated script execution, a classic XSS weakness (CWE‑79).

Affected systems include HCL Software’s Connections product version 8.0 and all its cumulative releases 1 through 12, as enumerated by the provided CPE strings. Any installation of HCL Connections 8.0 in these releases is susceptible to the XSS vulnerability.

The CVSS score of 5.4 indicates a medium‑to‑high severity impact, with an EPSS score of less than 1% suggesting a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Attack vector is inferred to be web‑based, as the flaw is triggered by crafted HTTP requests to the HCL Connections web interface, leading to client‑side script execution. Given the aforementioned data, organizations using these versions should evaluate the risk promptly.